3062848 matches found
RLSA-2026:47756 Important: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux...
openssh security update
An update is available for openssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
You were onto something with “It’s the Climb,” Miley
Welcome to this week's edition of the Threat Source newsletter. For my fiancee's 30th birthday, I took her on a weekend trip to Shenandoah National Park - a favorite of ours since we went to a wedding there several years back. We've done several incredible hikes over the years, but one in...
CVE-2026-12733
IBM DataPower Gateway is affected by CVE-2026-12733 where denial of service can occur due to improper resource limitations (CWE-770). The advisory lists affected products/versions: DataPower Gateway 10.6CD (10.6.1–10.6.6), 10.6.0 (10.6.0.0–10.6.0.9), 11.0.0 (11.0.0.0–11.0.0.1), and 10.5.0 (10.5.0...
EUVD-2026-51259
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...
CVE-2026-12733 IBM DataPower Gateway affected by denial of service
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...
CVE-2026-12733 IBM DataPower Gateway affected by denial of service
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...
CVE-2026-12733
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...
Malicious code in switchpaymentsapiserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fb976a9e7017cbd4a87769d48e213d81eb350767ba2ab4b7d8653501215daa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in consumerweb-risk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5f4efb70659109081158cdf1172001c3a589dbac63414af7c04485d40e42d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11392 Malicious code in switchpaymentsapiserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fb976a9e7017cbd4a87769d48e213d81eb350767ba2ab4b7d8653501215daa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11269 Malicious code in consumerweb-risk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5f4efb70659109081158cdf1172001c3a589dbac63414af7c04485d40e42d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
openjdk: OpenJDK: Enhance Jar file processing (Oracle CPU 2026-07)
Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability...
openjdk: OpenJDK: Enhance JPEG handling (Oracle CPU 2026-07)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...
openjdk: OpenJDK: Enhance Jar handling (Oracle CPU 2026-07)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...
openjdk: OpenJDK: Enhance XBM image support (Oracle CPU 2026-07)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...
openjdk: OpenJDK: Improve certification checking (Oracle CPU 2026-07)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...
Security Bulletin: Multiple Security vulnerabilities impacting watsonx.data integration
Summary Multiple Security vulnerabilities impacting watsonx.data integration. These vulnerabilities have been addressed and customers should update to version 5.3.1 at the earliest opportunity. Vulnerability Details CVEID:CVE-2026-33151 DESCRIPTION: Socket.IO is an open source, real-time,...
Malicious code in mcp-search-server (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75c59285ee1a5a83447815e7402410ccfca6a287e0c36d61bcfda3d55396f608 Versions published in 2026-07 after the package was removed by the original author and the name was re-registered by another contain a stub 'share compute swar...
MAL-2026-11198 Malicious code in mcp-search-server (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75c59285ee1a5a83447815e7402410ccfca6a287e0c36d61bcfda3d55396f608 Versions published in 2026-07 after the package was removed by the original author and the name was re-registered by another contain a stub 'share compute swar...